RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-05-14 09:24:57 +00:00
Code Issues Activity Actions

Utilities: Add "pledge" utility for launching a sandboxed command

Browse source 
This new command allows you to run any command with an initial set
of pledge promises.

Note that dynamically linked executables won't be able to bootstrap
without at least "stdio rpath prot_exec".

Inspired by http://justine.lol/pledge/ :^)
This commit is contained in:
Andreas Kling 2022-07-14 21:49:26 +02:00
parent 976562b817
commit ed9b2a85ed
2 changed files with 25 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
Userland/Utilities/CMakeLists.txt
View file

@ -175,6 +175,7 @@ target_link_libraries(pathchk LibMain)
target_link_libraries(pgrep LibRegex LibMain)
target_link_libraries(pidof LibMain)
target_link_libraries(ping LibMain)
target_link_libraries(pledge LibMain)
target_link_libraries(pls LibCrypt LibMain)
target_link_libraries(pmap LibMain)
target_link_libraries(pmemdump LibMain)

24
Userland/Utilities/pledge.cpp Normal file
View file

@ -0,0 +1,24 @@
/*
* Copyright (c) 2022, Andreas Kling <kling@serenityos.org>
*
* SPDX-License-Identifier: BSD-2-Clause
*/
#include <LibCore/ArgsParser.h>
#include <LibCore/System.h>
#include <LibMain/Main.h>
ErrorOr<int> serenity_main(Main::Arguments arguments)
{
StringView promises;
Vector<StringView> command;
Core::ArgsParser args_parser;
args_parser.add_option(promises, "Space-separated list of pledge promises", "promises", 'p', "promises");
args_parser.add_positional_argument(command, "Command to execute", "command");
args_parser.parse(arguments);
TRY(Core::System::pledge(StringView(), promises));
TRY(Core::System::exec(command[0], command.span(), Core::System::SearchInPath::Yes));
return 0;
}